Threats tagged 'ghsa-6vgg-f58c-3v5x'

A SQL injection vulnerability exists in PostgreSQL's pg_dump utility that allows an object creator to execute arbitrary SQL commands as the user restoring the dump. This occurs when an inherited column has a child-local not-null constraint with a name requiring quoting. The issue affects PostgreSQL major version 18, specifically minor versions before 18.7. Versions prior to 18 are not affected.